Sender ID

re: Sender ID

Chris — Fri, 14 Oct 2005 16:59:29 GMT

Sounds good! When is sp2 going to be released???

re: Sender ID

JonL — Fri, 14 Oct 2005 23:16:14 GMT

Excellent post - The author is clearly brilliant.

re: Sender ID

Konstantin Ryvkin — Sat, 15 Oct 2005 02:06:37 GMT

From what I've been hearing from the product group, SP2 is going to be released very soon. Stay tuned and visit http://www.microsoft.com/exchange

re: Sender ID

Chris Williams — Tue, 25 Oct 2005 19:09:27 GMT

You could expose the SCL property in the MIME header by editing a registry entry. This made it useful for handling post-IMF by systems that don't work with MAPI properties.

Is there some way to expose the SenderID result in the header as well?

re: Sender ID

P Spain — Wed, 26 Oct 2005 03:00:03 GMT

This is a great article.

I have a problem however. After turning on Sender ID and following the instructions above there is nothing showing in the SID column. The SCL value is showing perfectly however.

I've tried this on 3 servers from completely different companies (and domains).

Any ideas?

re: Sender ID

P Spain — Wed, 26 Oct 2005 03:01:17 GMT

re: Sender ID

Lindemann — Wed, 26 Oct 2005 14:06:08 GMT

I'm also having this issue. SCL is showing up, but the SID is not.

re: Sender ID

Donaldson — Mon, 31 Oct 2005 15:17:38 GMT

Same as the last 3 posters. I am not getting anything to show up in the column.

re: Sender ID

Donaldson — Tue, 01 Nov 2005 21:58:25 GMT

Just to update everyone, I installed the hotfix 905214 and I now am getting the SenderID values.

re: Sender ID

Carlos — Tue, 01 Nov 2005 22:12:33 GMT

Works on my workstation with no problem. Remember Sender ID must be enabled on the exchange server and a text record must be enabled thru your dns provider. I put text record with ultradns who handles my DNS

re: Sender ID

kryvkin — Mon, 07 Nov 2005 09:56:47 GMT

Carlos, thanks for the note about enabling SenderID. Yes, the above procedure simply visualizes the SenderID result that is stamped by the Exchange 2003 SP2 gateway.
If you gateway is not enabled with SenderID checks yet - the output of the form will be blank.
You can configure SenderID in the global settings and then enable it in the properties of SMTP Virtual Server.
Also don't forget SenderID specific counters that give the SenderID statistics in perfmon.

re: Sender ID

Tim Gowen — Tue, 08 Nov 2005 13:55:07 GMT

The problem I have is that I'd like to reject Soft Fails as well as Fails, and there doesn't seem to be a way to do that with the Message Filter as it's implemented here.

re: Sender ID

Rune Flo — Thu, 10 Nov 2005 12:02:38 GMT

hotfix 905214 applied. Still no Sender ID filtering, but I get the following event in the application log:

Event Type: Error
Event Source: MSExchangeTransport
Event Category: SMTP Protocol
Event ID: 7518
Date: 10.11.2005
Time: 09:23:44
User: N/A
Computer: GOGO
Description:
Sender Id must be configured with a list of trusted mail servers before it can be enabled.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
-------------
What is this "list of trusted mail servers"?
Where should they be entered?
BTW. Single Exchange server, no GW. domain (iku.sintef.no)

re: Sender ID

Omar — Thu, 10 Nov 2005 20:21:03 GMT

I have Win2k server, with Exch2003sp2, and my sender id is blank also. Can't run the hot fix because its only for w2k3.

re: Sender ID

Konstantin Ryvkin — Thu, 10 Nov 2005 23:25:40 GMT

Rune,
Sender ID uses RFC2822 Received header parsing to get to the IP address of the server that submitted mail to the organization. This allows SenderID to be enforced at the server that is not the outermost SMTP stack facing the Internet.
To parse the Received headers adequately you can only do it within the realm of your "trusted network" (designated IP range). You can configure it at the Global Settings-->Message Delivery (Properties)-->General Tab-->perimeterIPList Add.

In your single server environment you still need to configure this trusted list - it will just include the IPs of your server itself.

THT
Kostya

re: Sender ID

Param — Sat, 26 Nov 2005 19:45:24 GMT

Now that I have SP2, I have a few questions:-

1. How do I create the SPF DNS records for my domains? I have an exchange sp2 server that hosts email for about 15 domains. DNS is controlled at register.com. Any ideas? I dont think register.com's control panel specifically has any settings for SPF.

2. I also have a remote network at my datacenter that has an smtp server that sends out email (outbound only). Can I add that to any type of safe list?

3. What happens if a recipient's email server does not support sender-id? Will my email fail?

Thanks a bunch!

re: Sender ID

Exchange — Mon, 28 Nov 2005 23:07:57 GMT

Param,

To create SPF records, you can use a wizard such as this one:

http://www.anti-spamtools.org/SenderIDEmailPolicyTool/Default.aspx

I am not 100% sure I understand your question #2; but I think you'd be better off asking that one in our Newsgroups.

On question #3 - no, your email will go through, as the destination server will not even check.

re: Sender ID

BigFunkyChief — Sat, 31 Dec 2005 21:37:01 GMT

I'm wondering if anyone has run any tests to find out how many legimit domains actually use an SPF record. I would like to set my SenderID filtering to delete, but I'm worried that there are many legit domains that are not using this technology, and we'd drop alot.

I'm going to test it over the next few weeks, but wanted to see if anyone had any feedback on this.

Sender ID with Split DNS and Message Screener

Andy — Tue, 03 Jan 2006 01:51:20 GMT

Hello, I'm thinking on Sender ID in infrastructure based on:
Msg. Screener ->Exchange Front-end -> Exchange back-end cluster
It uses split brain DNS. Public and private. All LAN servers (also Exchange) use private DNS with forwarding option.
I can publish also public TXT records in my private DNS, and it can work I think
My own domain's TXT records are enough in private DNS.
The problem is Message Screener:-(
In such scenario I cannot use blacklists of SMTP servers on Exchange front-end, because all mails come from Msg. Screener server (private address). They have common, private IP address of sending SMTP server.

Is it possible to use Sender ID in above configuration?
Do I remove Message Screener and simply publish Exchange to work with Sender ID?
Thanks.

Liens utiles : Comment securiser un environnement de messagerie et de travail collaboratif avec Forefront ?

Stanislas Quastana's WebLog — Tue, 21 Nov 2006 21:05:09 GMT

Liens utiles : Protection de la messagerie collaborative ======================================= Vous

Session TechDays "Comment sécuriser une infrastructure de messagerie ?" : les liens utiles

Stanislas Quastana's WebLog — Mon, 12 Feb 2007 15:41:27 GMT

Suite à ma session avec Christophe Vallée des Microsoft TechDays, voici quelques ressources utiles sur